Forum Replies Created
-
AuthorPosts
-
Vladimir
KeymasterQuick workaround:
open user-role-editor-pro/js/ure.js, go to line 552 and replace current:if ( ure_data.do_not_revoke_from_admin ) {with updated
if ( ure_data.do_not_revoke_from_admin==1 ) {Vladimir
KeymasterGood point. v. 4.51 does not allow to superadmin to edit ‘administrator’ role. It seems I tested JavaScript code from older version. It stopped working as expected after browser page refresh.
I will investigate what was changed and why.Vladimir
KeymasterURE does not allow revoke capabilities from administrator role in 2 cases:
1) for single site WordPress
2) for WordPress multisite when current user is not superadmin.This is done to prevent accidental lose of admin permissions.
Vladimir
Keymaster1) Users->User Role Editor->Add Role
2) Select ‘Administrator’ at ‘Make copy of’ drop-down menu
If ‘Administrator’ role is not available for selection, go to Settings->User Role Editor->General and turn ON ‘Show Administrator role at User Role Editor’ option.Or add new role even empty, then click a checkbox to the left from the “Quick filter” label. It will select all capabilities. Update Role.
24/05/2019 at 14:46 in reply to: Unrestricted access to CPT and its taxonomies, while restricting pages/posts. #5716Vladimir
KeymasterThanks for clarification. I work on the update. Beta version will be available for testing next week.
Vladimir
KeymasterI suppose you try to revoke capability from administrator role. URE does not allow this to prevent accident lose of access to the site management.
Workaround – create a full copy of administrator role, revoke unneeded capabilities from it. Grant it to your other admins.
Vladimir
Keymaster‘profile’ page itself or shortcode inside it know nothing about whose profile will be shown via this page. So I don’t imagine how URE can help you with realizing needed model of view permissions for such dynamic content.
Vladimir
Keymaster‘user_role_editor’ shortcode has ‘users’ attribute which allows to show content for selected user(s). But it’s static.
If you would build shortcode dynamically to insert current user ID for current user with ‘volunteer’ or ‘volunteer coordinator’ roles it may work. But in this case you do not need shortcode from URE and can show/hide page content itself I suppose.Vladimir
KeymasterYes, he will be able to delete users without this capability.
‘ure_manage_options’ is not related to user deletion at all.
Any user with list_users, ‘delete_users’ can delete user available to him at the Users list page.Vladimir
KeymasterIf you revoke ‘ure_manage_options’ capability for user, he will stop be superadmin for URE. Thus it will not see other users with ‘administrator’ role.
It’s default security rule applied by URE for not superadmins.Be aware that if you grant to user access to Users->User Role Editor, such user can add ‘ure_manage_options’ back at any time.
Vladimir
KeymasterIf you revoke ‘ure_manage_options’ capability for user, he will lose access to Settings->User Role Editor page and stop be superadmin for URE.
Workaround scenario:
If you do not use plugins which directly require ‘administrator’ role instead of some user capability, you may create a copy of ‘administrator’ role for additional administrators and block this role (and users with this role) from themselves via “Other roles access” add-on.
Then do not use user with ID=1 in a daily work.Vladimir
KeymasterIt may be an issue of this special setup. I may investigate it. If that’s applicable send admin login credentials to support [at-sign] role-editor.com
Details about what page you try to restrict will be useful also.Vladimir
KeymasterHi Bjorn,
I published free version 4.51 of URE today. If I will not receive any critical responses for it, I plan to publish Pro version 4.51 tomorrow morning.
21/05/2019 at 08:03 in reply to: Unrestricted access to CPT and its taxonomies, while restricting pages/posts. #5696Vladimir
KeymasterDoes CPT has fully own taxonomy, instead of posts categories for example?
Vladimir
KeymasterHi Chris,
You missed link to screenshot.
When site uses User Role Editor, Gravity Forms requires apparently assign to a role its capabilities – look Custom Capabilities->Gravity Forms group:
gravityforms_create_form
gravityforms_delete_entries
gravityforms_delete_forms
gravityforms_edit_entries
gravityforms_edit_entry_notes
gravityforms_edit_forms
gravityforms_edit_settings
gravityforms_export_entries
gravityforms_preview_forms
gravityforms_system_status
gravityforms_uninstall
gravityforms_view_addons
gravityforms_view_entries
gravityforms_view_entry_notes
gravityforms_view_settings
gravityforms_view_updatesDid you granted them to a role?
-
AuthorPosts